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In the Claims: 

Cancel Claims 1-14 and add the following new Claims .15-47. 
1 15. (New) A system for using a sharld key to transmit secure data 



between a client and a server, :he system comprising: 
an encrypt/ decrypt engine for .using the shared key to encrypt 
or decrypt data, the encrypt/decrypt engine being 
configured for delivery Via a web page to a client in 
response to a user request and further configured to 
encrypt data independently of an identity of the physical 



2 

3. 
■ 4 ■ 

5 

6 
•7 

8 client;. 

9 wherein the server includes a user private keys database 
10 configured to store the shared key. And, wherein, it is 

* 1 . possible for the client and the server to reside on the same 

* 2 physical computing device. And when the shared key is 

13 derived from the user's authentication data and the 



14 derived shared key is 



used for encrypting all data. 



1 16. (New) The system of claim 15 wherein the shared k^y is a user's 

2 private key entered by a user into the web page. 



1 17. (New) The system of claim 15 further comprising a secure data 

2 database configured to store data received from the client and, 

3 upon the completion of a processing step, to deliver the stored 

4 data in an encrypted format to the client or to another client. 
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1 18; (New) The system of claim 15 furthe/ :omprising a secure data 

2 database configured to store data/received from the client and, 

. 3 upon receipt of a request for the data, to deliver the stored data 

. 4 in an enc rypted format to the client or to another client. 



1 19. (New) The system of claim 15 wherein the shared key is 

2 transmitted between the server and the client as few as zero 

3 times and the shared key is/transmitted betweenithe server and 

4 the user as few as one tixxJ. The key is not sent ifor 

.5 authentication purposes, , rather, the effect of the key in the 

6 encryption process is sent. Consequently, the shared key does 

7 not need to be retransmitted once it has been established. 



1 20. (New) The system of claim 15 wherein the shared key is a user's 

2 private key entered by a user. 



1 21. (New) the system of claim 15 wherein the client encrypt/ decrypt 

2 engine is installed on the client. 



1 22. (New) A system for using a shared key in transmitting secure 

2 . . data between a client and a server, the system comprising: 



3 ..an encrypt/decrypjt engine for using the shared key in 

4 encrypting data, the encrypt/decrypt engine being 

• . • • • • i ' : 

5 . configured to encrypt data independently of an identity of 

5 the client; and 
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7 a user private keys database located on the server and 

8 configured to store the shared key, the shared key being 
, . / 

the private key of a user. ' And, when the shared key is 



9 



10 derived from the user's authentication data and the 

1 1 derived shared key is used for encrypting all data. 



23. (New) The system of claim 22 wherein the server is configured to 
decrypt encrypted data received from the client using the shared 
key and to use a private server key, known only by the server, to 



I 
2 
3 

4 re-encrypt the decrypted/data 



2 



1 24. (New) The system of clairi 23 further comprising a! secure data 
database configured to .store the encrypted data received from 
3 the client and re-encrjpted by the server and to deliver the 

stored data to the client or to another client; the delivered data, 



after the completion of a processing step, being encrypted with 

6 the shared user key br with another shared user key. And, when 

7 the shared key is derived from the user's authentication data 

8 and the derived shared key is used for encrypting all data. 

1 25. (New) The system off claim 23 further comprising a secure data 

2 database configured to store the encrypted data received from 

3 the client and re jencrypted by the server and to deliver the 

4 stored data to the client or to another client; the delivered data 

5 being, upon receipt of a request for the data, encrypted with the 
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6 

.7 
8 



shared user key or with another shared user key, when the 
shared key is derived from the user's authentication data and 
the derived shared key is used/for encrypting alljdata.. 



1 26, (New) The system of claim 25 wherein the request is from the 

2 user. 



1 27. (New) The system of claim 25/wherein the request;is from an 

2 other user. 



1 28. (New) A system for using a shared key in transmitting secure 

2 data between a client and a server, the system comprising: 

3 an encrypt/decrypt engine for using the shared key entered by a 

4 user to encrypt data entered by the user, thb 

5 encrypt/ decrypt/engine being configured sufch that all 

6 data entered by/the user and stored on the client is stored 

7 in encrypted fopm, and further configured tq : encrypt data 

8 independently, pf an identity of the physical client; the 

9 shared key entry being the responsibility of the user and 
10 not the client; 
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11 the server including a user private keys databasb configured to 

12 8 tore the shared key, the shared key being a private key of 

13 .. a user; and not a physical client and, when the shared 

14 key is derived from the user's authentication data and the 

15 de rived shared key is used for encrypting ill data. 

1 29. (New) The system of claim 28, wherein "the encrypt/decrypt 

2 engine uses a symmetric key encryption/decryption algorithm 

3 for encrypting and decrypting data. 

1 30. (New) The system of claim 28, further including a Web server 

2 engine configured for the/user to securely send o£ receive data 

3 from the client to the server, 



1. 31. (New) A method for using a shared key in receiving! secure data 

2 on a server, comprising the steps of: 

3 delivering from a server to a client a web page including an 
•4 encrypt/ decrypt engine; 

5 encrypting data on jthe client using the encrypt /decrypt engine 

6 , and a shared; key entered by a user of the client, the 

7 shared key being shared between the user aind the server; 
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8 delivering the encrypted data from the .client to ihe server; when 

9 the shared key is derived from the user's authentication 

10 data and toe derived shared key is used for encrypting all 

11 data; / 

12 receiving the encrypted data at the /server; 

13 decrypting the encrypted data at the server using the shared 
!4 key; and / 

15 processing the decrypted data, when the shared key is derived 

16 from the user's authentication data and the derived shared key 

17 is used for encrypting all data/ 

1 32. (New) The method of claim 3 XL wherein the step of iprocessing the 

2 decrypted data includes the/ steps of: 

3 encrypting the decrypted cjata with a private server key; and 

4 boring the encrypted dati in a database. 



3 



1 33. (New) The method of claijh 31, wherein the step of processing the 

2 decrypted data includes the steps of: 
re-encrypting the data/ with an other user's private key shared 

4 between the other user and the server; and 1 

5 sending the re-encrypted data to the other user. 

1 34. (New) The method of claim 31, wherein the step of processing the 



2 



decrypted data includes the steps of: 



3 decrypting the encrypted data with the private server key; 
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4 re-encrypting the data witjh a second user's key ishared between 

5 the second user and the server; and 

6 sending the re-encrypted data to the second user. 



35. (New) The method of claim 31, wherein the step o^ processing the 
decrypted data includes the steps of: 

processing the data according to an instruction of the user; 
re-encrypting the processed data using the user's shared key; 
and 

sending the re-encrypted /processed data to the user. 



1 36. (New) The method of claim 31, wherein the step of; processing the 

2 decrypted data includes (storing the decrypted data in a secure 

3 database. 



1 37. (New) A computer-readdble medium comprising program 

2 instructions for causirig a computer system to use; a shared key 
. 3 : in receiving secure data at a server, by the steps of: 

.4 delivering a web page fr t om the server to a client, the web page 

5 . including an encrypt/ decrypt engine and being configured 
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6 to use the encrypt/decrypt engine and a shared key 

. 7 entered by a user of the client to encrypt data on the 

. 8 client, the shared key being shared between the user and 

9 the server; / 

10 receiving the encrypted data aJthe server; 

11 decrypting the encrypted data/using the shared key; and 

12 processing the decrypted data' and when the shared key is 

13 derived from the user's authentication data and the derived 

14 shared key is used for encrypting all data.. 

1 38. (New) A computer-readable radium comprising program 

2 instructions for causing a computer system to receive secure 

3 data on a server using a shared key, by the steps of: 

4 delivering an encrypt/ decrypt engine from the server to a client, 
. 5 the encrypt/ decryot engine being configured to use a 

6 shared key entered by a user of the client to encrypt data 

. ' • 7 . on the client, the shared key being shared between the 

. 8 user and the server and the encryption being independent 

9 of an identity of the physical client; 

10 receiving the encrypted data at the server; 

11 decrypting the encrypted data using the shared key; and 

12 processing the decrypted data, when the shared key is derived 
.13 from the user's authentication data and the derived shared key 

14 is used for encrypting all data.. 
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1 39. (New) The computer readable triedium of claim 38, further 

2 comprising program instructions for causing the processed 

3 decrypted data to be re-encrypted using a private server key. 

1 40. (New). The computer-readable medium of claim 3$, further 

2 comprising program instructions for causing the! processed 

3 decrypted data to be stored in a secure database! 



1 41. (New) The computer-readable medium of claim 38^ wherein 

2 processing, the decrypted data includes the steps^of: 

3 re-encrypting the data with the private server kejfc 

4 storing the re-encrypted data; 

5 decrypting the stdred data with the private server; key; 

6 encrypting the d&ta with a second user's key shared between 
"7 the second user and the server; and 

8 sending the encrypted data to the second user. 



1 42. (New) The computer-readable medium of claim 38, jwherein 

2 processing thi decrypted data includes the steps 6f: 

.3 processing the data according to an instruction of the user; 

4 encrypting the processed data using a shared key^ and 

5 sending the encrypted processed data to the user or to another 



user. 
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1 43. (New) A method of using a shared key in transmitting secure data 

2 between a client and a server using a shared key, comprising 

3 the steps of; I ; 

4 enciypting data using the s'hared key with an enbrypt/ decrypt 

5 engine configured to (encrypt data independently of an 

6 identity of the client/ the shared key being entered by a 

7 user of the client; 

8 delivering the encrypted dkta from the client to the server; 

I : 

9 receiving the encrypted data at the server; 

10 decrypting the encrypted jdata at the server using the shared 

1 1 ke y> the shared key being stored in a user private keys 
!2 database; and / 

13 processing the decrypted data, when the shared key is derived 

14 from the user's authentication data and thd derived 

15 shared key is used for encrypting all data.. ; 

1 44. (New) The method of claim 43, wherein processing jthe decrypted 

2 data includes the steps of: 

/ i 

3 encrypting the decrypted data with a private server key; and 

. —--^ — i 

1 45. (New) The method of claim 43, wherein the step of processing the 

2 decrypted data incluc es the steps of; 

3 encrypting the data with an other user's private key shared 

4 between the other user and the server; and 
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sending the encrypted data' to the other user. 



1 

2 
3 
4 
5 
6 



46,. (New) The method of claim^M, wherein the step coprocessing the 
decrypted data includes the steps of: 

decrypting the re~encryp(ed data with the private! server key; 
encrypting the data with a second user's key shared between 
the second user and the server; and 



sending the encrypted 



data to the second user. 
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